Skip to main content
POST
cURL
Submit the borrower application with exact product and policy versions, connections and documents. AMLOK collects and normalizes data, runs included checks and publishes the risk package. All IDs and cursors must belong to the authorized workspace and environment. Required scope: insights:write. Examples use synthetic IDs. Replace them with values returned by your environment.

Authorizations

Authorization
string
header
required

Server-to-server API key bound to exactly one workspace, institution tenant and environment. No caller-supplied workspace override is accepted. Do not use in public browser code.

Headers

Idempotency-Key
string
required

Stable for one intended command and its retries, scoped to key workspace/environment and operation. Mismatched body returns 409. Full response replay 24 hours; durable receipt remains.

Minimum string length: 1

Body

application/json

AMLOK resolves authorized source data, coverage, verification and calculations. Clients do not provide workflow IDs, manifests or processing_context. Validate product, policy, currency, market and borrower-type compatibility.

borrower_id
string
required

Opaque identifier, authorized within the API key workspace and environment.

Minimum string length: 1
application
object
required

Application for CreateOrigination. Constraints, requiredness and allowed values are defined by this schema.

lending_product_version_id
string
required

Opaque identifier, authorized within the API key workspace and environment.

Minimum string length: 1
risk_policy_version_id
string
required

Opaque identifier, authorized within the API key workspace and environment.

Minimum string length: 1
connection_ids
string[]
required

Connection ids for CreateOrigination. Constraints, requiredness and allowed values are defined by this schema.

Opaque identifier, authorized within the API key workspace and environment.

Minimum string length: 1
document_ids
string[]
required

Document ids for CreateOrigination. Constraints, requiredness and allowed values are defined by this schema.

Opaque identifier, authorized within the API key workspace and environment.

Minimum string length: 1

Response

Accepted asynchronously; inspect status, not just HTTP success.

data
object
required
meta
object
required